Year 9 · Autumn 2
Cybersecurity · Lesson 5 of 5
The Computer Misuse Act and data protection
TheoryTopic 19 Digital life, law and ethics
Year 9 · Cybersecurity · Lesson 5 of 5
You will learn to
- Identify which of the three sections of the Computer Misuse Act a scenario breaks.
- Explain why the penalties get heavier from section 1 to section 3.
- Summarise each data protection principle in about six words.
- Compare the UK laws with Spain's: the Código Penal and the LOPDGDD.
Year 9 · Cybersecurity · Lesson 5 of 5
Success criteria
You have got it when you can say:
- I can sort the scenario cards by law and section, and give a reason.
- I can write each data protection principle in about six words.
- I can name the Spanish law that matches each UK law.
Year 9 · Cybersecurity · Lesson 5 of 5
Retrieval starter
Questions from before. Write your answers, then show them.
- Last lesson
The best defence against SQL injection is…
A A firewallB Validation and parameterised queriesC A longer password
B. Validation and parameterised queries
- Last unit
In ["a", "b", "c"], the index of "c" is…
A cB 3C 2
C. 2
- Earlier this unit
Caesar shift 1: 'CAT' becomes…
A DBUB CAT1C BZS
A. DBU
Year 9 · Cybersecurity · Lesson 5 of 5
Key words (1 of 2)
- Computer Misuse Act
- UK law (1990) that makes hacking and spreading malware crimes.
- Data Protection Act
- UK law (2018), with UK GDPR, controlling how personal data is used.
- Copyright
- Automatic legal protection for original creative work.
- Digital footprint
- The trail of everything you do online.
Year 9 · Cybersecurity · Lesson 5 of 5
Key words (2 of 2)
- Phishing
- Fake messages that trick people into giving details.
- Open source
- Software whose code anyone can see, change and share.
- Ethics
- AI that is biased because its training data was. Cameras that keep us safe and also watch us. The digital divide: who is left out when everything moves online. Screen time and sleep. Practise arguing both sides.
The explanation · step 1 of 1 · part 1 of 3
UK law
Computer Misuse Act 1990 makes hacking a crime:
- Unauthorised access: e.g. using someone's password 'just to look'.
- Unauthorised access to commit another crime: e.g. to steal money.
- Unauthorised acts that damage a computer: e.g. spreading malware, DoS attacks.
Data Protection Act 2018 and UK GDPR control personal data. Organisations must:
The explanation · step 1 of 1 · part 2 of 3
UK law (continued)
- be open about what they collect and why;
- only use it for that purpose;
- collect only what they need;
- keep it accurate;
- not keep it too long;
- keep it secure.
The explanation · step 1 of 1 · part 3 of 3
UK law (continued)
The UK updated these rules with the Data (Use and Access) Act 2025 (Royal Assent 19 June 2025). It amends them; the core principles stay.
Copyright, Designs and Patents Act 1988 protects creative work automatically. Usually for the creator's lifetime + 70 years.
Year 9 · Cybersecurity · Lesson 5 of 5
Try it: Which law?
Year 9 · Cybersecurity · Lesson 5 of 5
Quick quiz · 1 of 3
Which is the Spanish equivalent of the Data Protection Act 2018?
- A LOPDGDD (Ley Orgánica 3/2018)
- B Código Penal art. 264
- C Ley de Propiedad Intelectual
A. LOPDGDD (Ley Orgánica 3/2018)
With the EU GDPR, the LOPDGDD is Spain's data protection law.
Year 9 · Cybersecurity · Lesson 5 of 5
Quick quiz · 2 of 3
An email link says 'brightwell.example' but hovering shows 'brightwe11-login.xyz'. This is…
- A Normal for banks
- B A red flag: the real address is different
- C Safe because it has HTTPS
B. A red flag: the real address is different
The visible link text can say anything. The real address is what matters.
Year 9 · Cybersecurity · Lesson 5 of 5
Quick quiz · 3 of 3
A photo is licensed CC BY-NC. Can a company use it in a paid advert?
- A Yes, if they credit the creator
- B No: NC means non-commercial
B. No: NC means non-commercial
NC forbids commercial use, even with credit. They would need to ask permission.
Year 9 · Cybersecurity · Lesson 5 of 5
Exit ticket
Answer on paper before you go. Then check.
Most of a smartphone's lifetime carbon footprint comes from…
A Making itB Charging itC Recycling it
A. Making it Mining and manufacturing are the biggest part, so keeping a phone longer helps most.
A fake bank email asking you to log in is…
A PhishingB A wormC Brute force
A. Phishing It fishes for your details with a fake message.
Year 9 · Cybersecurity · Lesson 5 of 5
Homework and the challenge
Homework
Study page 17 to the quiz; study page 19 steps on the laws.
End-of-unit challenge
An incident-response scenario: identify the attack, its impact and three defences.